Why Use Business Continuity Management Software ? Bratislava, Slovak Republic Steve Kokol

Why Use Business Continuity
Management Software ?
Bratislava, Slovak Republic
Steve Kokol
Vice President of International Sales
www.sungardas.com
Risk is a business issue, NOT an IT issue…!
 Business Continuity is a fancy term for resiliency against financial and
operational risk
 We cannot eliminate all risk, but we can take preventative measures to
strengthen our immunity against risk.
 Does your business continuity planning = your “residual” or tolerance for
risk? Do you know?
1
2
3
“Inherent Risk”
Driving a car is dangerous
Mitigating practices for lowering risk
Anti-lock brakes, horn
Break Lights, hazard light, turn signals, seat belts
Residual Risk
Risk tolerance or “appetite” to drive a car
© 2011 SunGard. | www.sungardas.com
2
Why Business Continuity Planning?
Problem: under increased pressures
1
Compliance
80% organizations had to provide proof of BC readiness at least once—
but sometimes more—external parties in the past 12 months*
+
2
Financial & Operational Risk
You can’t plan without knowing your business and risks, and most
organizations lack experience in estimating both their likelihood and
their consequences
+
3
Data dependencies, system complexity
Outdated plans, call lists, interdepartmental dependencies—wastes time
and effort and places a strain on planners, other personnel
Solution: a business-focused
Business Continuity Planning strategy
Source: Disaster Recovery Journal preparedness survey
© 2011 SunGard. | www.sungardas.com
3
MS Word is NOT the answer to BC planning
LDRPS = “Living Disaster Recovery
Planning System”
 Plans from various business units should be consolidated to provide a
corporate, global, enterprise BCP plan
• No way to do this with MS Word
• Specialized planning solutions provide for the development of an organizational
plan hierarchy for summarization and drill down
 BCP plans are dynamic, constantly changing & need to be updated regularly
• Extremely difficult and time consuming to continually update information in MS
Word
• Employee changes, company structural reorganizations, application changes
• Need the power and flexibility of a BC plan built on a relational database
• A non web-based word doc may not be securely accessible over the Internet
© 2011 SunGard. | www.sungardas.com
4
SharePoint or “Do-It-Yourself” is NOT the answer to BCP
DIY is not cost-free!
 No built-in logic, intelligence or best practices methodology
• DIY methodology requires organizations to build content on their own.
SunGard offers relevant, built-in content in the CMS, such as BIA surveys,
assessment surveys and plan navigator templates.
• SunGard offers unlimited, free training, 24/7 support, and large user network
 Not a relational database = no integration between modules
• SunGard CMS offers easy updates to push throughout the system and update
content in all areas where it is referenced. Static information will require many
changes to the same piece of information, wasting time and compromising
data integrity.
 Limited scalability, flexibility
• If version changes to SharePoint, the BCMP tool would need to be updated to
accommodate newer version
 Limited remote access capabilities
• In the event of a disaster, you will need to access recovery plans remotely
and securely, not from an internal production network
• SunGard can host CMS for you, saving time in maintenance effort, capital
investment $$ and making your solution secure and available remotely.
© 2011 SunGard. | www.sungardas.com
5
SunGard Continuity Management Solution (CMS): Benefits
of a Centralized, Relational Database
 Advantages
• Multiple users sharing data
• Security at the ―user level‖
• Data validation & checking
• Strong Search and Retrieval
• Can eliminate repeated data
• Ability to set field requirements
• Rules can be applied to data
relationships
• Multiple Presentation formats
(GUI)
© 2011 SunGard. | www.sungardas.com
6
Unique Functionality
 Continuity Management Solution – offers all aspects of a complete
continuity program from assessment, to planning, to notification and
disaster/incident management
 Easy to Use GUI Navigator interface – provides the ability to distribute
plan building access to plan owners with an easy to follow step by step
methodology that offers guidance and structure to the planning process
 Proven Planning Content – LDRPS offers 5 industry standard, expertly
designed plan templates for Crisis Management, Business Process, IT
Application, IT Hardware, Site Event Management are provided
 Proven Assessment Content – Standard surveys engineered from our
industry experience include the reporting that is necessary to assist your
organization in making the right decisions on your strategies
© 2011 SunGard. | www.sungardas.com
7
Unique Functionality
 Over 250 standard reports – for LDRPS alone!
• Providing full plan content to help you build the composition of your plan—providing
quality outputs for deliver plan content in a logical, concise format for plan
documentation and usage.
 Over 200 standard reports – for Assessment tools
• Full customization capabilities providing the right data to assist, help make
management decisions on recovery strategy
 Flexible output – for multiple audiences
• Tables of Contents can be created/manipulated to get exact output
• Each plan can be designed uniquely via sequence of reports and documents to right
outputs, (auditors, plan builders/owner, customer, etc.)
© 2011 SunGard. | www.sungardas.com
8
BUSINESS CONTINUITY MANGEMENT
SOLUTIONS
© 2011 SunGard. | www.sungardas.com
9
9
SunGard Continuity Management Solution
Each module was expertly designed as an industry-leading, stand alone solution. The single, robust platform
offers the simplicity and flexibility to build and customize as requirements expand or change, managing the
entire BCM lifecycle from assessing and planning to crisis communications and program management.
Assessing ►
Planning ►
Crisis Communications
 BIA Professional® to analyze process and function disruption impacts
and identify recovery objectives
 Risk Assessment to identify and measure potential threats to any
location/facility
 Vendor Assessment to simplify the process of gathering and
analyzing vendor resiliency capability and compliance
 Work Force Assessment to provide a clear understanding of work
force (staff, contractors and consultants) criticality and availability to
strengthen recovery efforts
 LDRPS® to build, maintain and execute plans for business continuity
and disaster recovery
*LDRPS for Hospitals also available
 NotiFind® powered by Varolii® for rapid and effective notifications to
manage any crisis
* NōtiFind® for Hospitals also available
 Incident Manager® powered by WebEOC® to help ensure effective
collaboration during the response and recovery efforts during any
disruption
© 2011 SunGard. | www.sungardas.com
11
Assessments: BIA Professional®
Assessing ►
Planning ►
Crisis Communications
GUIDES planning professionals by providing the content, survey,
and the analytical reporting they need to identify critical areas of
the business/processes and their impacts to recoverability.
 Get a clear, detailed picture of your
organization‘s financial and
operational vulnerabilities, business
impacts and recovery strategies
 Ensure integrity of survey results
with question branching and
validation intelligence
 Simplify data analysis and
presentation of results with robust,
built-in standard and custom
reporting functionality
© 2011 SunGard. | www.sungardas.com
12
Assessments: BIA Professional®
Methodology
 BIA Professional provides the content, survey,
and the analytical reporting to drive your
process assessment
 More than 55 pre-written questions
for customizable surveys!
Integration
 Seamless integration
with LDRPS 10
Data management
 Dynamic data analysis,
presentation, and plan
creation
 Over 150 pre-built
reports, and the ability
to create custom
reports to analyze a
range of data.
© 2011 SunGard. | www.sungardas.com
13
Assessments: Risk Assessment
LOCATION BASED assessment that identifies technical,
human, natural, and proximal risks threatening any location,
along with the probability and potential impact of specific
risks
 Customize site strategy: Assessment findings
account for each location‘s vulnerabilities to
formulate site-specific planning and mitigation
strategies
 Satisfy regulations and standards: Assessment
results serve as a foundation for addressing
regulations and standards, such as Sarbanes-Oxley,
BS 25999, and Basel-II
 Make intelligent decisions: A complete report
showing the probability and severity of threats at all
locations facilitates resource prioritization. Visual
ratings organize all findings based on probability,
potential impact, and an overall ‗risk score‘ for each
location to assist the planning process.
© 2011 SunGard. | www.sungardas.com
14
Assessments: Work Force Assessment
EVALUATES your critical personnel’s ability to respond to
disruptions, whether the situation involves the major loss of
a facility, the failure of a critical business operation or a
widespread event such as a pandemic
 Minimize employee record maintenance:
Enable employees to verify and update
their information online
 Minimize weaknesses in the human
aspect of your recovery plans: Identify
gaps in staff training and preparedness
 Assess reliance on staff: Identify
employees and contractors with the
greatest impact on recovery efforts.
© 2011 SunGard. | www.sungardas.com
15
Assessments: Vendor Assessment
EVALUATES the resilience of your vendors and supply
chain compliance with continuity requirements
 Minimize vendor record maintenance:
Enable vendors to verify and update
information online, including contract
information
 Minimize weakness in the supply
chain: Identify services or suppliers
not in compliance
 Centralize and supplement Vendor
Management Program: Collect and
store vendor contracts centrally;
identify vendors with low resilience
and high risk.
© 2011 SunGard. | www.sungardas.com
16
Planning: LDRPS
Assessing ►
Planning ►
Crisis Communications
The foundation for your Business Continuity/Disaster Recovery (BC/DR)
program
Plan navigation
 Guided user interface, follows
best practices, industry
expertise
Centralized planning
 Single repository of data, one
area for updates
Comprehensive output
 Standardized plans, regulatory
compliance, dynamic reports.
© 2011 SunGard. | www.sungardas.com
17
LDRPS is…Where Business Meets IT
 Planning Interdependencies
& Gap Analysis – Identifies
daily data flow, graphics to
visualize interdependencies
between applications,
hardware, and processes and
provides mapping of RTO
objectives and organizational
gaps in planning requirements
and strategy
 Recovery Task Workflow –
graphical task flow to visualize
the progress of a recovery in
complex recovery scenarios
where multiple processes are
being recovered
simultaneously, allowing you
to do multiple branching/
decision points in your
recovery
© 2011 SunGard. | www.sungardas.com
18
LDRPS Suite of Products
Essential
 For smaller organizations/reduced scope
of planning
 ‗On Demand‘ subscription service only
Professional
 Mid-size or larger organizations
 ‗On Demand‘ or perpetual license
 Customization options for sophisticated
users
Enterprise
 Global, enterprise-wide planning
solution
 Optional ASP or hosted solution
© 2011 SunGard. | www.sungardas.com
19
Administrator's Interface
 Full access to functionality
of LDRPS
• Can also provide specific
access to various levels in the
organization
 Define
• Plan hierarchy
• Common dictionaries for
consistent planning
• Reports and common
documents
 Administer LDRPS
• Customize screens and
terminology
• Import/export data
• Define security and access
 Build
• Plan Navigators for other users
© 2011 SunGard. | www.sungardas.com
20
20
Plan Builder's Interface
Provides guided,
secure access to
certain BCM plans
and functions
Plan Navigators
to assist in plan
building and
maintenance
Build and
maintain plans
easily and publish
results.
© 2011 SunGard. | www.sungardas.com
21
Why LDRPS?
 Product Integration
• Enables the integration & management
of various types of plans
• All products share a common database
that provides analysis from the
Assessment tools for future
maintenance of plans and impact
analysis
 Ease of use for Plan Builders
• Easy access for occasional users
 Process/application/hardware
interdependency mapping and gap
analysis
 Ease of plan maintenance over
time
 Employee accountability
and safety, resource allocation
 Standardized Reporting
 Supports Software as a Service,
license or hosted model
© 2011 SunGard. | www.sungardas.com
22
Communications: NōtiFind® powered by Varolii ®
Assessing ►
Planning ►
Crisis Communications
LDRPS integration
 NotiFind is the only notification system
with full integration with LDRPS solution
 No need to keep two separate data
sources; flexible integration with other
data sources
Viability: partnership, experience &
support
 Varolii is over 250 employees, in business
more than 10 years
 SunGard is a leader and pioneer in
Business Continuity and Information
Availability for more than 30 years
 Synergies of partnership, single point of
support
 Implementation, Training & Professional
Services
© 2011 SunGard. | www.sungardas.com
23
Communications: NōtiFind® powered by Varolii ®
Assessing ►
Planning ►
Crisis Communications
Message delivery performance
 Delivering more than 67 million messages in Q1 2011
 Availability SLA: contractually guaranteed service




availability SLA of 99.99%
Delivery Performance SLA: contractually guaranteed
delivery performance SLA of 99.9%
Message Trust Report: A report that shows customer
results against availability and delivery performance
commitments.
Blended, inbound and outbound (2-way) communications
Unlimited BCP messaging
Reliable delivery platform & technology
 Carrier-class communications network
 Multiple layers of security
 Extensive domestic and international reach
© 2011 SunGard. | www.sungardas.com
24
Communications: Incident Manager® Powered by WebEOC®
Electronic boards for any size
organization
 Web-enabled, virtual Enterprise
Operations Center (EOC)
 Establish a virtual EOC at any
time for multiple users, access
online from anywhere
 Incident Command System (ICS)
built around best practices on
tracking:
• ..The safety of your people
• ..The status of your critical processes
• ..The status of the locations affected
 ..The goal of getting your
organization back up and running
 Pre-load a standard methodology
 Life Safety, Impact Assessment,
Recovery and Restoration.
© 2011 SunGard. | www.sungardas.com
25
The SunGard Difference
© 2011 SunGard. | www.sungardas.com
26
The SunGard Difference
 Focus
• Disaster recovery/business continuity has been SunGard‘s core
focus for over 30 years
 Experience
• Largest installation base of clients in Business Continuity Software
Market with over 2300+ active installations
• LDRPS – first PC-based BCP software tool, released in 1988
• Assessment Modules – initially released over 15 years ago
• NotiFind – initially released for SunGard in 2004
• Incident Manager – initially released over 13 years ago
• LDRPS Certification program
© 2011 SunGard. | www.sungardas.com
27
Software Support
 Support Services
• 30+ Support Representatives with more than 45
application hosting/services certifications available to
support your organization throughout your
implementation
 Development Staff
• 60+ full time SunGard employees actively working
within our development team to enhance, improve
and create an easy-to-use functionality rich
application set
 Dedicated Account Management
• 30+ SunGard Account Managers working to help
ensure implementation and ongoing service
relationship delivers to the customer‘s expectation
and agreements
© 2011 SunGard. | www.sungardas.com
28
Software Support
Resources
 Free and unlimited Product Training
• Live online via WebEx
• Pre-recorded online sessions 24x7x365
• Also available on customer site*
Implementation Staff
 Dedicated Professional Services Team
 NotiFind Implementation Specialists
User Community Events
 Annual International User Group Forum offering industry and
company-specific sessions, and various workshops.
 Regional User Group (RUGs) providing an opportunity to
share ideas with other customers and offer feedback for
product enhancements
Additional Consulting Services
 Available for organizations that wish to outsource areas of
their program
 Fully-educated in software products, able to fill both short and
long-term roles on your BCM team.
*optional service
© 2011 SunGard. | www.sungardas.com
29
SunGard Global Support Services
 Local support from our worldwide SunGard offices: US, UK, France, Belgium, Luxembourg,







Sweden, and Latin America
Local support from our authorized representatives in over 100 countries including Lynx in
Eastern Europe
Local Technical Support from Lynx
Global Support Desk live representative available 24x5
Global Support Desk message line (non-business hours) available 24x7x365 for message
escalation
International OS support
Platform architecture supports multiple languages
Term customization with support for double-byte character sets.
© 2011 SunGard. | www.sungardas.com
30
Availability Services is a Division of SunGard Data
Systems
 One of the world's leading software and IT services companies providing software
and processing solutions for financial services, higher education and the public
sector
 SunGard also provides Disaster Recovery services, managed IT services,
Business
information availability consulting services and Business Continuity Management
Software
 Ranked 380 on the Fortune 500 and is the largest privately held business software
and services company on the Forbes list of private businesses
 Serving more than 25,000 customers in more than 70 countries
Customers
By Business
Higher
Education
10%
Public Sector
4%
$4.99bn
By Region
Europe,
Middle East,
Africa
22%
Financial
Systems
56%
Availability
Services
30%
© 2011 SunGard. | www.sungardas.com
Asia-Pacific
5%
$4.99bn
Americas
73%
31
SunGard Availability Services
Specialized
Business
Process
 We provide information availability solutions that costeffectively help reduce the risk for enterprises requiring
access to their critical data and systems
 Over 5 million square feet of data and operations space;
more than 80 locations and 11 countries
Broad Industry
Footprint
 More than 25,000 workforce continuity positions
world wide
 Over 30 platforms
 Redundant, dedicated global network
 Continued investment in technology, tools and infrastructure
 7 time winner of the Business Continuity Service
Provider of the Year Award
Category
Leadership
 2008 winner of the Outstanding Excellence in
Business Continuity and the Data Centre Strategy of
the Year Award
 Recognized as Leader in the Disaster Recovery space
by IT analyst firms Gartner and Forrester; recognized
on Gartner's Cloud Services Magic Quadrant
© 2011 SunGard. | www.sungardas.com
32
Core Services
Disaster Recovery
Managed Services
Consulting
Software
• 100% recovery success rate supporting customer recoveries
• Supported over 180,000 tests in North America since inception.
• SunGard has helped clients recover from over 3,500 declared disasters
worldwide.
• SunGard Availability Services has developed a thorough Disaster
Preparedness Plan for its own employees, products and services.
• Local access to global capabilities: more than 35 Managed Services data
centers in North America and Europe
• Robust portfolio of services ranging from co-location to full infrastructure
management
• Delivered over 100,000 action plans in past decade alone
• Supporting Business Continuity Planning and Management engagements
with dedicated practice
• SunGard Continuity Management Solution (CMS portfolio) is the most
widely used automated BCM solution/software in the industry
• Over 2,300 customers/ peer-to-peer user community
© 2011 SunGard. | www.sungardas.com
33
© 2011 SunGard. | www.sungardas.com
34